Data retention summary

This summary shows the default categories and purposes for retaining user data. Certain areas may have more specific categories and purposes than those listed here.

Site

Category

Personal data

All date concerning the logged user

Purpose

Registration for connecting to courses

Lawful connection to be sure that the correct certification belongs to the correct person.

Retention period

99 years

Lawful bases

Legal obligation (GDPR Art 6.1(c))

Processing is necessary for compliance with a legal obligation to which the controller is subject

Sensitive personal data processing reasons

Substantial public interest (GDPR Art. 9.2(g))

Processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject

Users

Category

Personal data

All date concerning the logged user

Purpose

Registration for connecting to courses

Lawful connection to be sure that the correct certification belongs to the correct person.

Retention period

99 years

Lawful bases

Legal obligation (GDPR Art 6.1(c))

Processing is necessary for compliance with a legal obligation to which the controller is subject

Sensitive personal data processing reasons

Substantial public interest (GDPR Art. 9.2(g))

Processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject

Course categories

Purpose

Retention period

No retention period was defined

Courses

Category

Course data

All data concerning a specific course

Purpose

Certification aproval

Lawful check to see if a person has the correct certification to conduct the activity.

Retention period

99 years

Lawful bases

Legal obligation (GDPR Art 6.1(c))

Processing is necessary for compliance with a legal obligation to which the controller is subject

Sensitive personal data processing reasons

Data made public by the data subject (GDPR Art. 9.2(e))

Processing relates to personal data which are manifestly made public by the data subject

Substantial public interest (GDPR Art. 9.2(g))

Processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject